Lucene search

K
cve[email protected]CVE-2009-0102
HistoryDec 09, 2009 - 6:30 p.m.

CVE-2009-0102

2009-12-0918:30:00
CWE-399
web.nvd.nist.gov
20
microsoft
project
cve-2009-0102
vulnerability
remote code execution
memory allocation
nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%

Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka β€œProject Memory Validation Vulnerability.”

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%